AppStore
Flexible Approval Workflow [Beta]
- Conditional logic based on user attributes and custom fields
- Flexible sequencing to reorder or adapt approval steps dynamically
- Clear, unambiguous activity logs for auditability
- Reduce risk with intelligent, context-driven approval decisions
- Ensure compliance with internal rules and regulatory requirements
- Improve user experience by removing unnecessary steps for low-risk scenarios
Integrations
New Integrations
New integrations with Zendesk, Databricks, Airtable, Jira Server, Cursor (Read-Only), and Powershell (Early Access) will be available from December 15th. Benefits:- Direct provisioning actions in Lumos to support pre-IDP workflows
- Broader visibility and lifecycle coverage across critical SaaS applications
Existing Connector Enhancements
Improvements across key integrations:- Bitbucket: Added Key Pair Authentication
- Snowflake: Added Key Pair Authentication
- LDAP: Account creation support (requires latest connector version)
- JumpCloud: Custom attribute syncing
- Microsoft Office: Manager updates included when updating users
- Deeper connector functionality to support more use cases
- Greater flexibility to sync custom attributes and model unique business logic
- Improved provisioning reliability and reduced manual intervention
Platform
Approval Delegation [Beta]
- Admin-defined delegation rules with temporary or indefinite durations
- Automatic routing of approval tasks to designated delegate(s)
- Governance controls with loop prevention and full audit history (“Delegate X on behalf of Y”)
- Faster approvals and reduced bottlenecks during PTO and holidays
- Reliable EA-based workflows for executives
- Stronger governance with clear attribution for every action
- Less manual task reassignment and fewer IT escalations
Custom Lumos Roles (Phase 1)
Admins can now create custom roles that define which Lumos modules a user can access enabling safe delegation without granting full admin. Assign coarse-grained permissions such as managing Access Reviews, viewing vendor data, or handling AppStore workflows, all with clear least-privilege boundaries. Benefits:- Delegate work to IT, Security, Helpdesk, and GRC partners without full admin
- Strengthen governance with least-privilege role design
- Improve onboarding speed for new collaborators
- Enable read-only access for audit and compliance teams
Branded Notifications [Beta]
Lumos emails can now be fully branded with your company’s logo, colors, and typography giving employees notifications that feel familiar, trustworthy, and on-brand. Benefits:- Reduce phishing concerns with company-identifiable emails
- Deliver consistent, professional communication across workflows
- Configure branding once and apply it automatically to supported templates
- Improve rollout success with notifications that match enterprise expectations
Lifecycle Management
Conditional Expressions in Access Policies [Beta]
CSR*), and nested condition groups. This brings Lumos in line with IAM standards used by Okta, Saviynt, and SailPoint and unlocks deployments for customers with complex role or jobcode structures. Admins can also preview which users match a policy, improving accuracy and trust before rollout.
Benefits:
- Model complete enterprise access logic directly in Lumos
- Replace brittle workarounds and reduce manual approvals
- Accelerate onboarding/mover automation with more accurate policy evaluation
- Improve auditability with expressive, readable conditions
- Increase admin confidence with real-time user matching previews
Analytics
Customizable Dashboards GA
Unlock deeper visibility across your SaaS portfolio and make analytics usable beyond dashboards. Lumos now supports richer data coverage, exports for reporting, and shared access for cross-functional teams. Benefits:- Build richer executive reports with exportable insights
- Share dashboards with Finance, Procurement, and Security teams
- Capture your business context through custom attributes
- Improve visibility into spend trends and access governance workflows